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Abstract 

We give a complete characterization for the rational torsion of an 
elliptic curve in terms of the (non-) existence of integral solutions of a 
system of diophantine equations. 
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1 Introduction 

In this paper we consider elliptic curves defined over Q. As it is known 
[U [15], each one of such curves is birationally equivalent to one, say 
E; given by an equation of the type 

E : Y 2 = X 3 +AX + B, with A,B, G Z; 

called short Weierstrass form, where it must hold A = 4A 4 +27B 2 ^ 0. 
The set of rational points of its projective clausure, noted E(Q), is a 
finitely generated abelian group (Mordell-Weil Theorem [U[T7]) and 
its torsion part, noted T(E(Q)) has been exhaustively described by 
Mazur (SJ [7] as isomorphic to one of the following groups: 

Z/nZ for n= 1,2, ...,10,12; 

Z/2Z x Z/2nZ for n= 1,2,3,4. 

We will give a procedure for finding out which of these groups is the 
actual torsion subgroup of our curve, by characterizing the existence 
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of points of order n in terms of the existence of an integral solution 
for a system of diophantine equations. 

Note that only orders which are prime or pure prime powers have 
to be considered; for the rest of the cases may be solved by joining 
systems, according to the factorization of the order we are interested 
on. 

Although the actual system depends on n, we will see that they 
are fairly similar systems, in more than one sense. The main result 
can be stated as follows: 

Theorem.- Let E : Y 2 = X s + AX + B be an elliptic curve, with 
A, B € Z. For every n G {3,4,5,7,8,9} there are, at most, 4 quasi- 
homogeneous polynomials P n ,Q n , R n , S n G Z[z\, z 4 ] such that E 
has a rational point of order n if and only if there exists an integral 
solution for the system 



Pn{z\,. 


.,Z 4 ) 


= 6 2 -A 




.,z 4 ) 


= 6 3 • B 


R n {z\, . 


.,z 4 ) 


= 




.,z 4 ) 


= 



Remark.- The case n = 2 will be treated separatedly, as not only the 
existence, but the number of solutions is important for determining 
whether the torsion group is cyclic or not. However, we will get sys- 
tems of the above type anyway, which we will call 4 1} and £j> 3) , for 
detecting the existence of one or three points of order two, respectively. 
Remark.— Actually, for most cases, less equations and variables have 
to be considered, according to the following table: 

Case Equations and variables Max. degree 



n = 


3 


2 equations 


in 


2 variables 


6 


n = 


4 


2 equations 


in 


2 variables 


3 


n = 


5 


3 equations 


in 


3 variables 


4 


n = 


7 


4 equations 


in 


4 variables 


4 


n = 


8 


3 equations 


in 


3 variables 


6 


n = 


9 


3 equations 


in 


3 variables 


10 



The remarkable equality between the number of equations and 
variables may be of some help if we try to use some numerical algo- 
rithm to find integral solutions. 
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Remark.— Now and then we will use the Nagell-Lutz Theorem [1H [6l 
1. 15J which, among more specific results, states that the coordinates 
of torsion points must be integers, under our assumptions. 

There exist some previous descriptions of torsion structures in 
terms of diophantine equations, notably by Ono [12], for the non- 
cyclic case and by Qiu and Zhang [131 [14] for the even cyclic case 
(strongly influenced by Ono's ideas). Both papers took advantage of 
the possibility of choosing (0, 0) to be a 2-torsion point, which is not 
suitable in the general case. Instead, while trying to cope with the 
odd order case we eventually arrived to a global strategy for finding 
equations which led to the previous theorem. 

Both Ono's and Qiu-Zhang's results have been used to study the 
behaviour of torsion structures when a bigger ground field is consid- 
ered (typically a quadratic extension of Q), for instance in [2j [3]. 
We hope that our characterization will shed some light also in this 
matter, where much is yet to be known. 

As a final remark, we should note that the resulting systems seem 
to be suitable for a computational diophantine attack, either classical 
and/or modern (see for instance [101 [IE] for a good account on each 
approach). However, it seems difficult to us that this strategy can 
beat the existing algorithms [4j which can compute torsion subgroups 
of curves with discriminant A ~ 2 20000 in only a few minutes. 



2 Points of order 3 and 9 

Assume our curve E has a point (x, y) of order three. As it is known 
[15] . (x, y) € E(Q) is a point of order three if and only if 

# 3 (x) = 3x 4 + 6Ax 2 + 12Bx - A 2 = 0. 

If (x, y) = (0, Z2 ), then we must have A = and therefore, B = z 2 . 
So we will suppose i ^ from now on, and divide ^(x) by x 4 to 
obtain the conic 

3 + 6X + 12Y - X 2 = 0, 

where X = A/x 2 and Y = B/x 3 . Thus we can parametrize the conic 
by 
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Now if we set t = p/q for p, q £ Z with gcd(p, q) = 1 and q ^ 
0, P — 3q 7^ 0, then we have 

A _ 3(p + (?) 5 _ -p 2 + 6pg + 3q 2 
x 2 p — 3q ' x 3 (p — 3q) 2 

Writing u = p — 3q we get 

A = 3(u + 4q)x 2 /u, B = {I2q 2 - u 2 )x 3 /u 2 . 

Thus, 

2 _ 3(« + 2g) 2 3 

and, since (x, y) G -E'(Q), there exist zi, z 2 G Z such that x = 3z\ and 
y = ±(9zf + z 2 ) with Z2 = 18zfq/u. Therefore, 

A = 27 zf + 6ziz 2 , B = z\-21z\, 



which also fits the case x = 0. 
Hence we have found: 



6 2 • A = P 3 = 6 2 (27 z\ + 6ziz 2 ) 
6 3 -5 = Q 3 = 6 3 (z 2 -27z?) 



Remark.— The polynomials obtained are, in fact, quasi-homogeneous. 
If we get to compute the solutions for the systems, we obtain all points 
of order three, which are 

{(3z 2 ,9zf + z 2 ), (3z 2 ,-(9zf + z 2 ))}. 

Conversely, we can easily check that (3z 2 ,±(9zf + z 2 )) has order 
three in the curve Y 2 = X 3 + (27zf + 6z 1 z 2 )X + {z\ - 27zf). This 
shows that the conditions are also sufficient. 

Assume now that E has a rational point of order nine. Then there 
must be rational points of order three in the curve, thus we already 
have 

P 9 = 6 2 (27zf + 6z 1 z 2 ) 
Q 9 = 6 3 (z 2 -27zf) 

Also, if (x, y) is a point of order nine, the first coordinate of [3](x, y) 
must be 3z 2 , as [3](x,y) has order three. 
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Using the chord-tangent and duplication formulae, the first coor- 
dinate in [3](x, y) is 

o z 2_ N(A,B,x) 
1 {3x± + 6Ax 2 + l2Bx- A 2 ) 2 ' 

where 

N{A,B,x) = x 9 -12Ax 7 -96£x 6 +30A 2 x 5 -24ABx 4 +(36,4 3 +48.B 2 )x 3 

+A8A 2 Bx 2 + (96AB 2 + 9A 4 )x + 8B(A 3 + 8B 2 ). 
So (x, y) £ E(Q) has order nine if and only if 

R 9 = x 9 -l2Ax 7 -96Bx 6 +30A 2 x 5 -2AABx 4 +(36A 3 +A8B 2 )x 3 +i8A 2 Bx 2 

+ (96AB 2 + 9A 4 )x+8B(A 3 + 8B 2 )-3z 2 (3x 4 + 6Ax 2 + 12Bx-A 2 ) 2 = 0. 

For writing it our way, we should make the appropriate substitu- 
tions 

A = 27zf + 6z!Z 2 , B = z\-27z\\ 

to obtain a quasi-homogeneous polynomial, for instance with weights 
w(zi) = 1, w{z 2 ) = 3, w(x) = 2; weighted degree 18 (with the pre- 
vious choice) and 69 monomials. This polynomial is the most com- 
plicated we have to deal with, but it turns out it can be written in 
a more amusing way. If we perform the Tchirnhausen transformation 
w.r.t. x; that is, we make 

z 3 = x - 3z 2 , 

we find out our polynomial Rq can be written as 

R 9 = zl-72z 1 (9z 3 + Z2)zl-48(27z 3 + 2z 2 )(9z 3 + z 2 )zl 
-864z 2 (9zf + z 2 ) 2 z\ - ltezi (9zf + z 2 ) 3 z\ 
+48(45z 3 + z 2 )(9zf + z 2 ) 3 zl + 1728z 2 (9z 3 + z 2 fz\ 
+576^(9^ + z 2 ) 5 z 3 + 64(9z 3 + z 2 f 

which, taking into account the given parametrization of points of order 
three, proves the following funny fact: 

Corollary.— Let (x,y) be a point of order nine, and write [3](x,y) = 
(x',y'). Then (x - x')\{2y'f . 

In order to get the easiest possible system we will perform 

z 2 i — ► z 2 - 9z\ 
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and our system is then 



Qi.A = P 9 = 6 2 (27zf + 6ziz 2 ) 
6 3 -5 = Q 9 = 6 3 (4~ 27 4) 



Z2zt 



= Rg = zl- 72z 1 z 2 z 7 3 - 48 (9zf + 2z 2) 

-m\z\z\z\ - lUziz^zl + 48 (36zf + z 2 ) 44 
+1728444 + 576z!zfz 3 + 64zf 

Remark.— If one wants to use this system for deciding whether a 
given curve has a torsion group of order nine, it is wise to solve first 

6 2 -A = P 9 , 6 3 -B = Q 9 , 

which is a system of two equations in two variables. One then moves 
on to solving R 9 as a polynomial in z%. Notice then that this poly- 
nomial, which has degree nine, can only have three different integer 
roots corresponding to the first coordinates of points of order nine, 
since an elliptic curve can only have six such different points, and, 
in Weierstrass short form, three of them should be symmetric to the 
other three w.r.t. the x-axis. 



3 Points of order 5 and 7 

Orders five and seven share an ad-hoc strategy for obtaining the re- 
spective systems £5 and £7. Assume (x\,wi) G E(Q) has order five. 
Then the first coordinate of [4](xi, w\) must be again x±, and if we 
write [2](xi,wi) = (x2,W2), then it must hold X\ 7^ x 2 . We will have, 
from duplication formula, 

x\ - 2Ax\ - %Bxi + A 2 _ x\- 2Ax\ - 8Bx 2 + A 2 _ 
4(xf + Ax x + B) ~ X2] 4(4 + Ax 2 + B) ~ Xl ' 

This equations yield a system whose (naive) general solution for B 
is given by 

jxi = xi, x 2 = x 2 , A = A, B = + x 2 ){x\ - Ax\x 2 + x\ - 2A) | 

where x±,x 2 ,A £ Z and A must verify the second degree polynomial 
A 2 + (2x 2 + 2xv + 2v 2 )A - x 4 + x 3 v + 9x 2 v 2 + xv 3 - v 4 = 0. 
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The discriminant of this equation is 

4(xi - x 2 ) 2 {2xi + x 2 )(xi + 2x 2 ), 
hence there must exist 13 £ Z such that 

x\ = (2xi + x 2 ){xi + 2x 2 ). 
With these notations we can finally write 

A = -x\ - x\x 2 - x\ + {x\ - x 2 )x 3 , 

B = —£-{xi + x 2 )(-3xl + 2xix 2 - + 2 ( x i ~ ^2)^3)- 
Now, since 

2 _ (x\ - x 2 ) 2 (3xi + 2x 3 + 3x 2 ) 
wi ~ 4 . 

there must be X4 € Z verifying 

x\ = 3xi + 2x 3 + 3x 2 . 

This completes a system T,' 5 , given by 

A = (-x\ - x\x 2 - x\ + (xi - x 2 )x 3 ^ 

4B = -(xi + x 2 )(-3xi + 2xix 2 - 3x2 + 2(xi - x 2 )x 3 ) 
= x§ - (2xi +x 2 )(xi + 2x 2 ) 
= x\ - (3xi + 2x 3 + 3x 2 ). 

Note that the polynomials obtained in this case are actually ho- 
mogeneous, except for S5. We can also get the torsion points with a 
little extra work. With our previous notations it must hold 

w 2 = ( x i ~ ^2) 2 (3xi - 2x 3 + 3x 2 )/4, 

hence we can find t € Z such that with 

t 2 = 3xi — 2x 3 + 3x 2 . 

Then the full list of torsion points of order five is 

JY , (xi ~x 2 )x 4 \ ( (xi - x 2 )t \\ 
{{xi,± 2 J, [x 2 ,± jj. 
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By plugging these points into the curve we see that conditions 
given by £5 are sufficient to guarantee the existence of torsion points 
of order five. We then eliminate x 3 from the last equation and rename 



Z\ = Xl, Z 2 = X 2 , Z3 = X4 

to finally get the equivalent system £5: 



S 5 : { 



(zi - z 2 ) - 6z 1 + (zi - z 2 )z 3 
6 3 -B = Q 5 = M-(z 1 + z 2 )[Gzf-2z 1 Z2 + (z 2 -z 1 )zi 
= R 5 = z\ - 6zf [z\ + z 2 ) + {z\ - z 2 f 



Let us do then the case n = 7. Assume (x±, wi) € E(Q) is a point 
of order seven, and denote [2](xi,wi) = (x 2 ,w 2 ) and [3](xi,^i) = 
(xs,ws), being x±, x 2 and x 3 different integers. From the duplication 
formula, as above, we have 

Fi(x 1 ,x 2 ) =xf- 2Ax\ - 8B Xl + A 2 - 4(x? + Ax\ + B)x 2 = 0. 

From the expression of x 3 used in the order nine case we can write 

F 2 ( Xl , x 3 ) = x\- YlAx\ - 96Bxl + 30A 2 xf - 24ABxf+ 

+ (36A 3 + A8B 2 )xl + 4&A 2 Bx\ + (96AB 2 + 9A 4 ) Xl + 8B(A 3 + 8B 2 )- 

-x 3 (3xj + 6Axl + 125xi - A 2 ) 2 = 0. 

Also, using the addition formula for (xi,Wi) and (x 2 ,w 2 ), we can 
also get x 3 as an expression in x\ and x 2 . Now, the difference between 
our two expressions for x 3 (one in X\ and another in x\ and X2) must 
vanish, and we get 

F 3 (x\,x 2 ) = 0, 

where F 3 is a polynomial in x\ and x 2 with 139 terms whose degree 
is 20. 

We will get still another relationship between our parameters, us- 
ing now two different ways to express x 3 , as it is also the first coordi- 
nate of [4](xi, w\). The first one comes from [2](x 2 ,w 2 ) and depends 
only on x 2 , and the second one from the addition formula for (xi,wi) 
and (x 3 ,w 3 ) which depends on x\ and x 3 . Thus we get 

Fi(xi,X2,Xz) = 0, 
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where F4 is a polynomial in x±, x 2 and X3 with 321 terms whose degree 
is 18. 

Now if we consider the ideal (F±, F2, F3, F4) C Q[xi, x 2 , X3] and 
calculate a Grobner basis with respect to the graded reverse lexico- 
graphic order we get a basis consisting of five polynomials. The general 
solution for {A,B} of this system is 

{xi = Xl, X2 = X2, X3 = X3, A = A, 

B = - (x3x\ - 2x1X2X3 + x\x3 + x\ — 4x 2 xf - x\x\ - 2(x 2 + Xi)A^j j 
where xi, x 2 , X3, A G Z and A verifies 

A 2 + (2x1 + 2x l + 2x 2 X!)A- 

x\ + 3x 2 xf — 2x\ X3 + x\x\ + 3x 2 X3xf + 6xfx 2 — X2X3 = 0. 

As a side remark, it was not easy to find this relation, which par- 
allels case n = 5. In fact, for most methods (including most orders 
considered for Grobner bases computations), A ended up verifying a 
fourth degree equation, which became then a dead end for our hopes 
(see below). 

The discriminant of the previous second degree equation verified 
by A is 

4(x 2 + 2xi)(xi - x 2 ) 2 (xi + x 3 + x 2 ) 
hence there must be X4 £ Z with 

xl = (x 2 + 2x\)(xi + X3 + x 2 ). 

Therefore 

A = — — X 2 — XiX 2 + X4(xi — X 2 ), 

4B = (3xf + X3X 2 + 3x 2 xi + x 2 X3 — 2xix 2 X3 + 2x 2 + 2(x 2 — x\)x4). 

Now again, as (x\,wi) has order 7, we can write X3 as the first 
coordinate of [3](xi,u>i) and [4](xi, wi), to get A as a root of the 
polynomial 

Z 4 + 6x 2 (xi + x 2 )Z 3 + (-8xf + 15xlx 2 2 + llx 2 x? + 23x^x x + 13x^)Z 2 
+ (-24x 2 xf + 58x^xf + 42x^x 2 - 6x 2 2 xf + Ax\ + 24x\x x + VQx%)Z 
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- (x\ +x x x 2 +x 2 ) (x% - Zxlxi-ZZxlxl - 20x 2 x? +39x 2 Xi - \2x 2 x\+x\), 

which was the typical result we mentioned above. 

Hence, if we substitute Z by the above expression of A, we get 

—x\ + 2(2xi + X2)xjj + (2xi + X2)(xi - X2)X4~ 

-2(2xi + x 2 ) 3 x 4 + 3(x 2 + xix 2 + x^)(2xi + x 2 ) 2 = 0. 
Since x\ = (x 2 + 2xi)(xi + X3 + x 2 ), we have 

(2xi + X 2 ) 2 (3xf — X1X3 + XiX 2 — x| — 3x 2 X3 + X 2 — 2(xi — X3)X4) = 0. 

It is an easy fact that 2xi + x 2 7^ 0. Otherwise, X4 = and then 
it must hold 

xi(5xi + 4x 3 ) - x 3 (x 3 - xi) = 0, 
from the expression of X3 above. We would then have 

5x 2 + 5x1X3 — x 2 = 0, 

which is impossible for different integers x\ and X3. Thus we obtain 

3Xi — X1X3 + XiX 2 — x| — 3x 2 X3 + X 2 — 2(xi — X3)X4 = 0. 

Finally, since (xi,iwi) G -E(Q) and 

w\ = i(xi - x 2 ) 2 (3xi + 2x 2 + 2x 4 + ^3), 
there must be X5 G Z such that 

x\ = (3xi + 2x 2 + 2x 4 + x 3 ). 

Thus we have proved that the necessary conditions for having a 
point of order seven lead yield the existence of solution for E' 7 , with: 

A = (— x\ - x\ - XiX 2 + X4(xi — x 2 )) 

AB = (3xf + x 3 xf + 3x 2 xi + x 2 x 3 - 2xix 2 x 3 + 2x 2 + 2(x 2 - x\ )x 4 ) 

= x\ - (x 2 + 2xi)(xi + x 3 + x 2 ) 

= 3xf — X1X3 + XiX 2 — X3 — 3x 2 X3 + x\ — 2(xi — X3)X4 

= x\ - (3xi + 2x 2 + 2x 4 + £3) 

Since also W2,ws G Z, there will be s,t G Z verifying 
s 2 = 3xi + 2x 2 + x 3 - 2s 

t 2 = 4x| — 3X3X 2 — 3x 2 X3 — 6xiX 2 X3 + 4X3X1S — 4X3X 2 S 

+3xf + 3xix^ - 2sxf + 2x\ + 2sx\ 
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Now one can compute the coordinates of all order seven points and 
the curve is easily checked to have the desired torsion group. In order 
to arrive at £7 we make 



Zl=Xl, Z 2 = X2, Z3 = X5, Z4 = X4, 

and eliminate X3 using the last equation from £' 7 , to obtain 



£7 : { 



6 2 -A 
6 3 • B 






-6 Z 
54- 



(zi + z 2 ) 2 - Z1Z2 + z 4 (z 2 - Zl) 
z\{z\ - Z2) 2 + 4z 2 (z^ + ziz 2 + Z1Z4 - Z2Z4) 



(2z\ + Z2 + Z4) - z\ (2z\ + z 2 ) 
-z\ + (5zi + z 2 + 6z 4 ) z\+ 

^— 3zf + 3z% — 8zl — I8Z1Z4 — 6^2-^4) 



Remark.— We wanted all of our systems to have the previous form. If 
one is not so concerned about that one can find a simpler (in principle) 
system. Clearly, from the third equation 



4 



(2zi + Z2 + Z4) 

2z\ + z 2 



which we can substitute in the second and fourth equation. Note that, 
in the fourth equation, we can clear the resulting denominator, as 

(2zi + z 2 f = (2xi + x 2 f + 0. 

One should be concerned about Z3 being an integer. This might 
not be guaranteed if we perform the above substitution. However, as 



2zi + z 2 = 2x\ + x 2 



A + 3xf 
2wi 



using the duplication formula, the above substitution is valid. 
Finally, 








A 



(Zl + Z 2 ) 2 - Z X Z 2 + Z4(Z 2 ~ Zl) 



AB{2zi + z 2 ) - [(2zi + z 2 + Z4) 2 {z 1 - z 2 ) 2 

+4Z2(2Z\ + Z2)(Zl + Z\Z2 + Z\Z4 ~ Z2Z4) 

-z\ + 2 (2zi + z 2 ) z\ + (2zi + z 2 )(z 1 - z 2 )z'i 
-2(2z 2 + z 2 ) 3 Z4 + 3 (z\ + z x z 2 + zl) (2 Zl + z 2 ) 2 
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4 Points of even order 



We will finish with a quick discussion on points of even order; which 
is the most treated case in the existing literature. We noted before 
that order two has a special feature: it is important to know exactly 
the number of points, not only to make sure one such point exists. 
However, we already have the following 

(a, (3) G E has order two => (3 = and a 3 + Aa + B = 0. 

Hence the existence (and the number) of points of order two is 
that of the rational roots of X 3 + AX + B. If we call the roots 
{a, /3,7} (whether they are rational or not), using Cardano formulae 
it is straightforward to show that 

B = /3 2 7 + 7 /3 2 = fa(P + 7 ), A=-f3 2 - 1 2 -l3 1 = (3 1 -{(5 + 7 ) 2 - 

Now, a G Q if and only if so does (3j and (3+j. Hence the existence 
of a rational root is equivalent to the existence of an integral solution 
for: 

E d). f 6 2 -^ = p 2 (1) = e 2 -^-, 2 ) 
2 -\ es.B = Q w = 6 3. ZlZ2 . 

In this context, the points of order two are those given by 




so the existence of three points of order two is characterized by the 
existence of an integral solution for 

A = zi- z\ 

B = Z\Z2 

= z\- z% + 4zi 
Eliminating z\ and renaming gives then: 

s (3) f 6 2 -^ = Pf = -9-(z 2 + 3z 2 ) 
2 ' \ 6 3 • B = = 54 • [zl - z 2 zf) 

Moving on to order four, assume the point (x\,w\) G ^(Q) has 
order four, what happens if and only if [3](xi,u>i) = (x±,— wi), and 
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tui 7^ 0. Using the same expression as in order nine for the first coor- 
dinate of [3]P, we quickly get 

B = - (bxl - Ax x ± \J{3x 2 - 2A)(A + 3x 2 1 ) 2 ^j . 

Therefore, there must be X2 £ Q such that 3xf — 2 A = x\. Then 
we have 

^ = - (3x : — x|), 

and ^ 

B = -(x 2 + xi)(7xi + 2xix 2 - x\). 



The second coordinate verifies 

w\ = g(3xi - x 2 )(x 2 + 3xi) 2 , 

so it must be x 2 / ±3a?i and there must be 13 S Z \ {0} such that 

3xi - x 2 2 
^^ = x 3 . 

Our provisional system £ 4 then will be 
2A = 3x1 ~ A 



8B = (x 2 + xi)(7xf + 2xix 2 -x^) 

4 



= 2x1 - 3xi + x 2 



Note that x 2 ,X3 € Z, since xi,^4 G Z, and X\ and x 2 have the 
same parity; because 2 A = 3x\ — x\. 

In order to prove that the existence of solutions for S 4 suffices, we 
can compute the full list of points of order four, which are 

x 3 (3xi + x 2 ) 
xi,±- 



2 

and check are they are, in fact, points of order 4 in 

E . y 2 = X 3 + 3x i ~ x 2 v + (^2 + xi)(7xf + 2xix 2 -x|) 
2 8 

As for orders five and seven, we can now eliminate x 2 and rename 

Z\ = xi, z 2 = x 3 
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6 2 (-Szf + <ozxz\ - 2z|) 

6 3 (2zx-z 2 2 ) (z\ + 2z x z\- zt) 

Let us finally do the case of order eight. Assume then that E has a 
rational point (v, t) of order eight. In this case, there must be rational 
points of order four in the curve, therefore we already have 

6 2 • A = 6 2 (-3zf + Qz x zl - 2z|) 
6 3 -B = 6 3 (2zi-z|) (z{ + 2z x zl - zfj 

with z\,Z2 €. Z such that z 2 ^ ±3zi, and [2](u,t) = (zi,wi). 
Now using the duplication formula, we have the equation 

v 4 - 4z lV 3 + (6zf - Ylz x z 2 + 4:zl)v 2 + {-A&z\z\ + 40zi4 - 8z% - 4zf)v 

z\ - <\&z\z\ + 64z 2 4 - 28zi z\ + 4zf = 0, 
whose solutions are 

V = Zl + z 3 (z 2 + Z4) 
for some 23,2:4 G Z such that 

z"l + z\- 3zi = 0, z\ - z 2 (2z 3 + z 2 ) = 0. 

Furthermore, we get 

t = ±z 3 z 4 (z 2 + z 3 + z 4 ). 

So an elliptic curve E : y 2 = A" 3 + AX + £>, with i,BeZ, has a 
point (v, t) of order 8 in E(Q) if and only if the system E' 8 , given by 

6 2 • A = 6 2 (-3zf + 6«i z\ - 24) 

6 3 • B = 6 3 (2zi - 4) (4 + 2 ^3 - 4) 

= zf + zl - 3zi 
= zj- z 2 (2z 3 + z 2 ) 

has a solution (zi, 24) G Z 4 . As previously, by computing all points 
of order eight, the condition is easily shown to be sufficient. The 



to get 
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customary elimination (z\ in this case) and renaming (z{ i — > Zj-i) 
gives finally: 



S 8 : 4 



6 2 -,4 = p 8 = -12 -(4-^14 + 4) 

6 3 • B = Q 8 = 8 ■ (*? - 2z|) (2^ - 8^z| - 4) 
= i? 8 = zl-zi (2z 2 + zi) 



As another example of unexpected properties which can be de- 
duced from this equations, when we eliminate z\ we can prove the 
following result. 

Corollary.— Let (x, y) be a point of order four. If there are points of 
order eight, then 3x can be written as sum of two squares. 

5 Appendix: Irredundancy of R ni S n 

We will produce a few examples to show why our polynomials are 
in fact necessary in order to assure the desired torsion structure. Of 
course this does not mean one cannot find simpler systems charac- 
terizing T(E(Q)). Note that orders two, three and four do not need 
such examples to be found. Similarly, it is clear that Rg cannot be 
dropped, as it would mean that every curve with points of order three 
would have points of order nine. 



Order five 



Example.— Consider 

E: Y 2 = X 3 - 92X + 480. 
If we set £5, we find that 

z\ = 2, z 2 = 4, z 3 = 6 
is a solution for the first two equations. However 

1*5(2,4,6) =4. 
Accordingly, T(E(Q)) is trivial. 



Order seven 



Example.— Consider 

E : Y 2 = X 3 + X + 23. 
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Then 

z\ = 1, z 2 = 2, z 3 = -2, z 4 = -8; 
is a solution for the first three equations of £7, but 

5 7 (l,2,-2,-8) = -443. 

Again, the torsion subgroup of E is trivial. 
Example.— The curve 

E : Y 2 = X 3 - \X 

has T(E(Q)) = (Z/2Z) x (Z/2Z). If we only onsider the first, second 
and fourth equation from £7 we find the solution: 

z\ =2, z 2 = -2, z 3 = z 4 = 0; 

but 

i? 7 (2,-2,0,0) =4. 



Order eight 
Example.- Let us take 

E : y 2 = X 3 - 92X + 480. 

The first two equations from Sg admit the common solution 

z\ = 3, z 2 = 6. 

However that leads to 

i?8(3,6,z 3 ) =4 -54. 
which has no integral solutions. As expected, T(£'(Q)) = Z/4Z. 
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